Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/KBawbte_rTAQZaaaj962NKkNxJ4.roa
File: KBawbte_rTAQZaaaj962NKkNxJ4.roa (raw, json)
Hash identifier: ylxs9VdGSmehszfK7guXyZMopE159PQXLlbW2xlnbdo=
Subject key identifier: 28:16:B0:6E:D7:BF:AD:30:10:65:A6:9A:8F:DE:B6:34:A9:0D:C4:9E
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 018BF23FFC103CB9F4563F98AF7FD0A590B3
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/KBawbte_rTAQZaaaj962NKkNxJ4.roa
Signing time: Tue 21 Nov 2023 14:19:21 +0000
ROA not before: Tue 21 Nov 2023 14:19:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6461
IP address blocks: 94.26.97.0/24 maxlen: 24
45.94.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Nov 2023 15:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:3f:fc:10:3c:b9:f4:56:3f:98:af:7f:d0:a5:90:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Nov 21 14:19:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2816b06ed7bfad301065a69a8fdeb634a90dc49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:91:3c:ac:1a:aa:66:d8:56:82:2f:82:9e:64:
c3:dc:31:99:c6:3c:94:d8:4a:a2:6d:9c:59:6a:9c:
3b:ac:62:0b:ca:d2:0f:8e:3e:6c:3a:ae:92:01:80:
f0:d0:f8:0a:e0:99:5c:12:a4:49:5e:11:5e:af:87:
d3:fc:2a:b3:99:90:b6:27:54:89:c3:25:f0:1e:77:
f9:05:b2:17:5c:75:3d:36:e3:c8:58:0e:a4:b8:71:
fb:5d:19:bd:28:16:59:93:7d:14:b3:cd:34:58:0b:
5d:ea:5b:e6:ec:e5:47:0d:2f:8e:17:f3:74:bb:a3:
db:c9:46:7b:66:7b:d0:11:0e:83:fb:3a:2c:a7:26:
3d:9e:b9:3f:20:2c:e1:0d:a6:c6:ab:2b:4b:90:e4:
b9:f9:41:ce:75:d2:38:79:50:22:a6:9f:77:f7:ff:
05:18:40:1e:b1:2a:2e:ea:5a:87:a9:ee:e6:0d:6d:
62:bc:30:de:f0:ad:22:2f:82:7a:7a:5e:68:80:0a:
4c:94:ad:73:22:05:c4:51:63:ea:e8:d0:c0:7e:a0:
ef:9a:7e:bd:a7:1e:f7:42:e6:74:3e:9e:54:34:81:
8e:eb:85:98:17:d3:46:ec:92:f8:8b:13:c7:38:15:
ec:6b:d1:1e:cf:93:7f:27:3b:80:88:06:5e:9c:5e:
c4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:16:B0:6E:D7:BF:AD:30:10:65:A6:9A:8F:DE:B6:34:A9:0D:C4:9E
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/KBawbte_rTAQZaaaj962NKkNxJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.10.0/24
94.26.97.0/24
Signature Algorithm: sha256WithRSAEncryption
80:4b:23:99:7d:28:e5:51:3d:d3:35:73:7c:7b:4e:e1:14:57:
07:bb:7f:b7:32:1c:96:c9:3f:18:b1:61:8d:ce:0d:19:53:00:
c3:4f:ba:3a:3c:46:df:e0:5f:6e:04:ed:0a:07:bb:6c:9d:79:
44:c5:d0:52:54:e8:39:c6:e9:62:f9:14:33:1a:3b:09:7a:94:
dd:5e:75:ab:55:c3:6f:4a:b5:68:44:f0:eb:fd:cb:4c:5e:8f:
14:08:a0:fe:2b:57:b3:2c:c2:a6:8a:9b:98:41:cc:4f:f9:7d:
7b:ee:a8:4a:aa:36:2b:86:a3:c4:87:76:a8:50:8f:1c:fd:a1:
a5:e2:05:7d:30:a9:5a:15:06:20:cc:bc:4f:19:77:2d:35:f0:
c0:e8:5c:61:c2:eb:9b:b1:8f:eb:98:14:51:d3:fe:fe:92:ef:
92:01:bd:cc:8e:d7:3b:93:93:3f:06:06:cf:e3:47:c9:42:a2:
78:9c:29:02:da:6a:c0:56:93:fb:3f:05:3a:22:99:60:e3:e4:
40:cb:98:99:2b:b4:0c:81:d8:6e:9e:e5:0b:2a:72:28:64:fc:
41:04:6b:4a:35:8b:46:b3:2a:e9:a9:d1:de:ef:47:84:71:5e:
c0:4e:9d:a8:ca:9a:fb:a1:c4:e9:6e:9b:f8:aa:3f:f9:8c:20:
8e:c4:6a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:21 2024 by rpki-client on console-ams.rpki-client.org